Which AWS service records account activity and API calls so you can determine who deleted resources?

AWS CloudTrail is the correct answer because it continuously monitors and records account activity across your AWS infrastructure, including API calls made by users, roles, or AWS services. This logging capability allows you to identify who performed specific actions, such as deleting resources, when they did it, and from where. Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior. AWS Trusted Advisor provides recommendations to help you optimize costs, improve performance, enhance security, and more. While these services are security-related, they do not provide the detailed API call logging necessary to determine who deleted resources.